Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
ECHO-91b4-e7d6-f02c
See a problem?
Import Source
https://advisory.echohq.com/osv/ECHO-91b4-e7d6-f02c.json
JSON Data
https://api.osv.dev/v1/vulns/ECHO-91b4-e7d6-f02c
Upstream
CVE-2026-33997
GHSA-pxq6-2prw-chj9
Withdrawn
2026-11-12T08:00:07Z
Published
2026-03-27T17:38:09Z
Modified
2026-11-12T08:20:24Z
Summary
Off-by-one in Docker Engine plugin privilege validation. Daemon plugin code; datadog-agent links only github.com/docker/docker/pkg/system. The pinned 28.x branch head 31a1689cb0a1 also carries the fix backport.
Details
References
https://advisory.echohq.com/cve/CVE-2026-33997
https://github.com/advisories/GHSA-pxq6-2prw-chj9
Affected packages
Echo
datadog-agent
Package
Name
datadog-agent
Purl
pkg:deb/echo/datadog-agent
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
7.84.3+e1
Database specific
source
"https://advisory.echohq.com/osv/ECHO-91b4-e7d6-f02c.json"
github.com/docker/docker
Package
Name
github.com/docker/docker
Purl
pkg:deb/echo/github.com%2Fdocker%2Fdocker
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Database specific
source
"https://advisory.echohq.com/osv/ECHO-91b4-e7d6-f02c.json"
github.com/moby/moby
Package
Name
github.com/moby/moby
Purl
pkg:deb/echo/github.com%2Fmoby%2Fmoby
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Database specific
source
"https://advisory.echohq.com/osv/ECHO-91b4-e7d6-f02c.json"
gitlab-runner-18.10
Package
Name
gitlab-runner-18.10
Purl
pkg:deb/echo/gitlab-runner-18.10
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
18.10.1+e3
Database specific
source
"https://advisory.echohq.com/osv/ECHO-91b4-e7d6-f02c.json"
gitlab-runner-18.11
Package
Name
gitlab-runner-18.11
Purl
pkg:deb/echo/gitlab-runner-18.11
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
18.10.1+e3
Database specific
source
"https://advisory.echohq.com/osv/ECHO-91b4-e7d6-f02c.json"
gitlab-runner-19.0
Package
Name
gitlab-runner-19.0
Purl
pkg:deb/echo/gitlab-runner-19.0
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
18.10.1+e3
Database specific
source
"https://advisory.echohq.com/osv/ECHO-91b4-e7d6-f02c.json"
gitlab-runner-19.1
Package
Name
gitlab-runner-19.1
Purl
pkg:deb/echo/gitlab-runner-19.1
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
18.10.1+e3
Database specific
source
"https://advisory.echohq.com/osv/ECHO-91b4-e7d6-f02c.json"
gitlab-runner-19.3
Package
Name
gitlab-runner-19.3
Purl
pkg:deb/echo/gitlab-runner-19.3
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
19.3.3+e1
Database specific
source
"https://advisory.echohq.com/osv/ECHO-91b4-e7d6-f02c.json"
gitlab-runner-19.4
Package
Name
gitlab-runner-19.4
Purl
pkg:deb/echo/gitlab-runner-19.4
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
19.4.1+e1
Database specific
source
"https://advisory.echohq.com/osv/ECHO-91b4-e7d6-f02c.json"
gitlab-runner-19.5
Package
Name
gitlab-runner-19.5
Purl
pkg:deb/echo/gitlab-runner-19.5
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
19.5.0+e1
Database specific
source
"https://advisory.echohq.com/osv/ECHO-91b4-e7d6-f02c.json"
grafana-12.3-fips
Package
Name
grafana-12.3-fips
Purl
pkg:deb/echo/grafana-12.3-fips
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
12.3.11+e4
Database specific
source
"https://advisory.echohq.com/osv/ECHO-91b4-e7d6-f02c.json"
k3s-io-containerd-2.2
Package
Name
k3s-io-containerd-2.2
Purl
pkg:deb/echo/k3s-io-containerd-2.2
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2.2.10-k3s1+e2
Database specific
source
"https://advisory.echohq.com/osv/ECHO-91b4-e7d6-f02c.json"
Echo:Go
github.com/docker/docker
Package
Name
github.com/docker/docker
Purl
pkg:golang/github.com/docker/docker
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Database specific
source
"https://advisory.echohq.com/osv/ECHO-91b4-e7d6-f02c.json"
github.com/moby/moby/v2
Package
Name
github.com/moby/moby/v2
Purl
pkg:golang/github.com/moby/moby/v2
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Database specific
source
"https://advisory.echohq.com/osv/ECHO-91b4-e7d6-f02c.json"
ECHO-91b4-e7d6-f02c - OSV